$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: XF9BuOkzKanS6kmFle9KTUkhshS0MBY2Yt8bZSyUZxQ= Subject key identifier: 9E:A8:90:8B:7A:86:5A:86:4E:C6:5F:D7:08:08:31:4F:28:8D:DA:42 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A67DD7B5FDF3DCB33780 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a6:7d:d7:b5:fd:f3:dc:b3:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=70d6cb29-f753-4832-b1d0-ec1400d5bd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:4b:2f:b9:15:4f:78:da:93:20:0d:64:ff: 65:ae:28:bb:67:db:12:53:f6:29:da:95:9f:e4:7f: ec:61:62:19:1d:e4:70:52:a0:e5:8d:0b:45:65:7c: 1f:8d:46:3b:30:7f:46:31:9e:4c:5d:84:e4:34:c2: 39:c2:5e:d1:65:73:2e:65:50:df:44:41:1b:c4:dc: ad:aa:b0:8c:de:69:36:72:75:6a:df:0d:69:1d:8a: 48:59:62:e2:65:01:0c:8f:93:f7:11:c3:b5:67:c2: e1:e4:56:31:21:86:79:b0:d7:00:e6:61:f5:7f:fc: 77:76:67:b6:41:84:ff:25:4d:9a:fd:2c:8d:34:e2: aa:51:6e:e7:e4:34:fa:f6:33:c9:cb:aa:0b:26:7e: fe:a9:5e:b7:31:b8:ce:25:4b:1a:c7:29:3a:3e:e6: 27:69:10:10:a2:ca:8d:23:0f:1c:f3:fc:32:a3:ed: 67:50:7d:43:c7:57:44:1e:3c:c7:c0:97:73:2f:74: 4d:71:7c:9f:4b:31:22:b5:39:05:e0:ad:5b:69:20: 38:6f:d1:a7:45:41:27:a2:18:b6:90:75:17:25:db: 4d:39:ec:c9:59:cd:a6:a0:84:b1:fc:ff:b9:22:a1: 67:f8:46:4b:8e:09:44:a3:49:34:77:78:2b:11:a5: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:90:8B:7A:86:5A:86:4E:C6:5F:D7:08:08:31:4F:28:8D:DA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0e:54:cf:97:10:1c:b3:6f:00:f9:86:ab:7f:cc:6c:63:18: ac:57:46:67:fb:51:9e:d8:28:77:ca:be:64:34:ed:a9:59:79: 15:16:3c:38:23:31:4e:0f:43:0e:91:f1:6a:83:27:a9:a5:22: ad:8b:f3:a1:2f:8b:5c:7a:38:03:84:cf:30:ee:a1:7f:b2:05: 86:ba:ea:0c:bc:ca:b3:24:56:dc:4a:7c:01:ca:53:2a:f9:e9: 7a:11:97:8d:fe:1c:6e:3b:1b:81:de:07:63:dd:73:f5:4b:a1: 8e:2b:74:cd:19:6c:55:00:26:a2:53:dc:a4:f7:c3:03:7d:e0: 43:51:b1:b9:cd:a3:40:51:01:b7:3d:c4:ed:ca:46:85:c3:cf: ca:87:f0:58:8f:d6:61:e0:57:9b:2f:55:89:5e:9e:13:be:0d: 05:f9:f4:fb:81:39:8a:54:0e:89:7b:b0:aa:ca:eb:da:2c:d0: e8:d7:8d:a2:6b:7a:fa:fa:01:ff:c0:04:0b:31:f8:b2:bc:c7: ae:9a:15:f8:24:8f:c8:d9:25:0c:19:75:f8:94:04:ff:a1:da: 12:24:31:c4:a7:90:02:de:24:17:0f:8d:ff:94:a1:88:b4:08: 44:05:cd:99:6e:87:e5:88:45:95:0d:4b:37:4f:7d:9a:ab:5b: 0a:5a:c2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6Z917X989yzN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzBkNmNiMjktZjc1My00ODMyLWIxZDAtZWMxNDAwZDViZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cVLL7kVT3jakyANZP9lrii7Z9sSU/Yp2pWf 5H/sYWIZHeRwUqDljQtFZXwfjUY7MH9GMZ5MXYTkNMI5wl7RZXMuZVDfREEbxNyt qrCM3mk2cnVq3w1pHYpIWWLiZQEMj5P3EcO1Z8Lh5FYxIYZ5sNcA5mH1f/x3dme2 QYT/JU2a/SyNNOKqUW7n5DT69jPJy6oLJn7+qV63MbjOJUsaxyk6PuYnaRAQosqN Iw8c8/wyo+1nUH1Dx1dEHjzHwJdzL3RNcXyfSzEitTkF4K1baSA4b9GnRUEnohi2 kHUXJdtNOezJWc2moISx/P+5IqFn+EZLjglEo0k0d3grEaXN8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6okIt6hlqGTsZf1wgIMU8ojdpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4OVM+XEByzbwD5hqt/zGxjGKxXRmf7UZ7YKHfKvmQ07alZeRUWPDgj MU4PQw6R8WqDJ6mlIq2L86Evi1x6OAOEzzDuoX+yBYa66gy8yrMkVtxKfAHKUyr5 6XoRl43+HG47G4HeB2Pdc/VLoY4rdM0ZbFUAJqJT3KT3wwN94ENRsbnNo0BRAbc9 xO3KRoXDz8qH8FiP1mHgV5svVYlenhO+DQX59PuBOYpUDol7sKrK69os0OjXjaJr evr6Af/ABAsx+LK8x66aFfgkj8jZJQwZdfiUBP+h2hIkMcSnkALeJBcPjf+UoYi0 CEQFzZluh+WIRZUNSzdPfZqrWwpawrI= -----END CERTIFICATE-----Generated at Wed Sep 23 10:46:02 2026 by rpki-client